Universal quantum computation with ideal Clifford gates and noisy ancillas 
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We consider a model of quantum computation in which the set of elementary operations is limited 
to Clifford unitaries, the creation of the state |0), and qubit measurement in the computational 
basis. In addition, we allow the creation of a one-qubit ancilla in a mixed state p, which should 
be regarded as a parameter of the model. Our goal is to determine for which p universal quantum 
computation (UQC) can be efficiently simulated. To answer this question, we construct purification 
protocols that consume several copies of p and produce a single output qubit with higher polarization. 
The protocols allow one to increase the polarization only along certain "magic" directions. If the 
polarization of p along a magic direction exceeds a threshold value (about 65%), the purification 
asymptotically yields a pure state, which we call a magic state. We show that the Clifford group 
operations combined with magic states preparation are sufficient for UQC. The connection of our 
results with the Gottesman-Knill theorem is discussed. 

PACS numbers: 03.67.Lx, 03.67.Pp 



I. INTRODUCTION AND SUMMARY 

The theory of fault-tolerant quantum computation de- 
fines an important number called the error threshold. If 
the physical error rate is less than the threshold value 
(5, it is possible to stabilize computation by transform- 
ing the quantum circuit into a fault-tolerant form where 
errors can be detected and eliminated. However, if the 
error rate is above the threshold, then errors begin to 
accumulate, which results in rapid decoherence and ren- 
ders the output of the computation useless. The actual 
value of 5 depends on the error correction scheme and 
the error model. Unfortunately, this number seems to 
be rather small for all known schemes. Estimates vary 
from 10^6 (see Q) to IQ-"' (see dHli), which is hardly 
achievable with the present technology. 

In principle, one can envision a situation in which 
qubits do not decohere, and a subset of the elementary 
gates is realized exactly due to special properties of the 
physical system. This scenario could be realized exper- 
imentally using spin, electron, or other many-body sys- 
tems with topologically ordered ground states. Excita- 
tions in two-dimensional topologically ordered systems 
are anyons — quasiparticles with unusual statistics de- 
scribed by non-trivial representations of the braid group. 
If we have sufficient control of anyons i.e., are able to 
move them around each other, fuse them, and distinguish 
between different particle types, then we can realize some 
set of unitary operators and measurements exactly. This 
set may or may not be computationally universal. While 
the universality can be achieved with sufficiently nontriv- 
ial types of anyons |E IE S 1 more realistic systems of- 
fer only decoherence protection and an incomplete set of 



* E-mail: 
t E-mail: 



serg@csxaltedi^eduj^ 



kltaev@iqi.caltech.edu| 



topological gates. (See 0,01 about non-Abehan anyons 
in quantum Hall systems and [ Til IT^ about topologi- 
cal orders in Josephson junction arrays.) Nevertheless, 
universal computation is possible if we introduce some 
additional operations (e.g., measurements by Aharonov- 
Bohm interference 0| or some gates that are not related 
to topology at all). Of course, these non-topological oper- 
ations cannot be implemented exactly and thus are prone 
to errors. 

In this situation, the threshold error rate 5 may become 
significantly larger than the values given above because 
we need to correct only errors of certain special type and 
we introduce a smaller amount of error in the correc- 
tion stage. The main purpose of the present paper is to 
illustrate this statement by a particular computational 
model. 

The model is built upon the Clifford group — the group 
of unitary operators that map the group of Pauli oper- 
ators to itself under conjugation. The set of elementary 
operations is divided into two parts: O = Oideai^O faulty 
Operations from Oideai are assumed to be perfect. We 
list these operations below: 

• Prepare a qubit in the state |0); 

• Apply unitary operators from the Clifford group; 

• Measure an eigenvalue of a Pauli operator (ct^, ti^, 
or (7^) on any qubit. 

Here we mean non-destructive projective measurement. 
We also assume that no errors occur between the opera- 
tions. 

It is well-known that these operations are not sufficient 
for universal quantum computation (unless a quantum 
computer can be efficiently simulated on a classical com- 
puter). More specifically, the Gottesman-Knill theorem 
states that by operations from Oideai one can only obtain 
quantum states of a very special form called stabilizer 
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states. Such a state can be specified as an intersection 
of eigenspaces of pairwise commuting Pauli operators, 
which are referred to as stabilizers. Using the stabihzer 
formahsm, one can easily simulate the evolution of the 
state and the statistics of measurements on a classical 
probabilistic computer (see or a textbook for 
more details). 

The set O faulty describes faulty operations. In our 
model, it consists of just one operation: 

• Prepare an ancillary qubit in a mixed state p. 

The state p should be regarded as a parameter of the 
model. From the physical point of view, p is mixed due 
to imperfections of the preparation procedure (entangle- 
ment of the ancilla with the environment, thermal fluctu- 
ations, etc.). An essential requirement is that by prepar- 
ing n qubits we obtain the state p®" i.e., all ancillary 
qubits are independent. The independence assumption 
is similar to the uncorrelatcd errors model in the stan- 
dard fault-tolerant computation theory. 

Our motivation for including all Clifford group gates 
into Oideai relies mostly on the recent progress in the 
fault-tolerant implementation of such gates. For in- 
stance, using a concatenated stabilizer code with good er- 
ror correcting properties to encode each qubit and apply- 
ing gates transversally (so that errors do not propogate 
inside code blocks) one can implement Clifford gates 
with an arbitrary high precision, see . However these 
nearly perfect gates act on encoded qubits. To establish 
a correspondence with our model, one needs to prepare 
an encoded ancilla in the state p. It can be done using 
the schemes for fault-tolerant encoding of an arbitrary 
known one-qubit state described by Knill in . In the 
more recent paper 18] Knill constructed a novel scheme 
of fault-tolerant quantum computation which combines 
(i) the teleported computing and error correction tech- 
nique by Gottesman and Chuang 0; (ii) the method of 
purification of CSS states by Diir and Briegel 20]; and 
(iii) the magic states distillation algorithms described in 
the present paper. As was argued in flj, this scheme is 
likely to yield much higher value for the threshold 6 (may 
be up to 1%). 

Unfortunately, ideal implementation of the Clifford 
group can not be currently achieved in any realistic phys- 
ical system with a topological order. What universal- 
ity classes of anyons allow one to implement all Clifford 
group gates (but do not allow one to simulate UQC) is 
an interesting open problem. 

To fully utilize the potential of our model, we allow 
adaptive computation. It means that a description of an 
operation to be performed at the step t may be a function 
of all measurement outcomes at the steps 1, . . . , t— 1. (For 
even greater generality, the dependence may be proba- 
bilistic. This assumption does not actually strengthen 
the model since tossing a fair coin can be simulated us- 
ing Oideai-) At this point, we need to be careful because 
the proper choice of operations should not only be de- 
fined mathematically — it should be computed by some 



z, 




FIG. 1: On the left: The Bloch sphere and the octahedron 
O. On the right: The octahedron O projected on the x-y 
plane. The magic states correspond to the intersections of 
the symmetry axes of O with the Bloch sphere. The empty 
and filled circles represent T-type and _ff-type magic states, 
respectively. 

efficient algorithm. In all protocols described below, the 
algorithms will actually be very simple. (Let us point out 
that dropping the computational complexity restriction 
still leaves a non-trivial problem: can we prepare an arbi- 
trary multiqubit pure state with any given fidelity using 
only operations from the basis O?) 

The main question that we address in this paper is as 
follows: For which density matrices p can one efficiently 
simulate universal quantum computation by adaptive 
computation in the basis O? 

It will be convenient to use the Bloch sphere represen- 
tation of one-qubit states: 

p = ^ (/ + p^ct"^ + pya^ + p,^') . 

The vector (p^,, py, pz) will be referred to as the polariza- 
tion vector of p. Let us first consider the subset of states 
satisfying 

\P-A + \py\ + \pz\ < 1- 

This inequality says that the vector {px, Py, Pz) lies in- 
side the octahedron O with vertices (±1, 0, 0), (0, ±1, 0), 
(0, 0, ±1), see Fig. 1. The six vertices of O represent the 
six eigenstates of the Pauli operators a'^ , , and . We 
can prepare these states by operations from Oideai only. 
Since p is a convex linear combination (probabilistic mix- 
ture) of these states, we can prepare p by operations from 
Oideai and by tossing a coin with suitable weights. Thus 
we can rephrase the Gottesman-Knill theorem in the fol- 
lowing way. 

Theorem 1. Suppose the polarization vector [px, Py, Pz) 
of the .state p belongs to the convex hull of (±1,0,0), 
(0,±1,0), (0, 0,±1). Then any adaptive computation in 
the basis O can be efficiently simulated on a classical 
probabilistic computer. 

This observation leads naturally to the following ques- 
tion: is it true that UQC can be efficiently simulated 
whenever p lies in the exterior of the octahedron Ol In 
an attempt to provide at least a partial answer, we prove 
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the universality for a large set of states. Specifically, 
we construct two particular schemes of UQC simulation 
based on a method which we call magic states distillation. 
Let us start by defining the magic states. 



Definition 1. 

that 



Consider pure states \H), \T) G such 



\T){T\ = - 



\H){H\ = - 
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The images of\T) and \H) under the action of one-qubit 
Clifford operators are called magic states of T-type and 
H-type, respectively. 

(This notation is chosen since \H) and \T) are eigenvec- 
tors of certain Clifford group operators: the Hadamard 
gate H and the operator usually denoted T, see Eq. {TJ.) 
Denote the one-qubit Clifford group by Ci. Overall, there 
are eight magic states of T-type, {U\T), U £ Ci} (up to a 
phase) and twelve states of H-type, {U\H), U G Ci}, see 
Fig. 1. Clearly, the polarization vectors of magic states 
are in one-to-one correspondence with rotational symme- 
try axes of the octahedron O (iJ-type states correspond 
to 180° rotations and T-type states correspond to 120° 
rotations). The role of magic states in our construction is 
two-fold. First, adaptive computation in the basis Oideai 
together with the preparation of magic states (of either 
type) allows one to simulate UQC. (See Sec. Illll ) Sec- 
ond, by adaptive computation in the basis Oideai one can 
"purify" imperfect magic states, ft is a rather surprising 
coincidence that one and the same state can comprise 
both of these properties, and that is the reason why we 
call them magic states. 

More exactly, a magic state distillation procedure 
yields one copy of a magic state (with any desired fi- 
delity) from several copies of the state p, provided that 
the initial fidelity between p and the magic state to be 
distilled is large enough. In the course of distillation, we 
use only operations from the set Oideai- By construct- 
ing two particular distillation schemes, for T-type and 
i?-type magic states, respectively, we prove the following 
theorems. 

Theorem 2. Let Ft{p) he the maximum fidelity between 
p and a T-type magic state i.e., 



Ft{p) = max ^{T\WpU\T). 



Adaptive computation in the basis O — OideaiUjp} allows 
one to simulate universal quantum computation whenever 



Ft{p) > Ft 



dcf 




0.910. 



Theorem 3. Let Fh{p) be the maximum fidelity between 
p and an H-type magic state, 



FH{p)^ma.^J{H\WpU\H). 

Adaptive computation in the basis O — OideaiUjp} allows 
one to simulate universal quantum computation whenever 

Fh{p) > Fh^ 0.927. 

The quantities Ft and Fh have the meaning of thresh- 
old fidelity since our distillation schemes increase the po- 
larization of p, converging to a magic state as long as 
the inequalities Ft{p) > Ft or Fh{p) > Fh are ful- 
filled. If they are not fulfilled, the process converges to 
the maximally mixed state. The conditions stated in 
the theorems can also be understood in terms of the po- 
larization vector [px, Py, Pz)- Indeed, let us associate a 
"magic direction" with each of the magic states. Then 
Theorems|21ISlsay that the distillation is possible if there 
is a T-direction such that the projection of the vector 
(Px, Py, Pz) onto that T-direction exceeds the threshold 
value of 2F^ — 1 « 0.655, or if the projection on some of 
the i?-directions is greater than 2T^ — 1 « 0.718. 

Let us remark that, although the proposed distillation 
schemes are probably not optimal, the threshold fidelities 
Ft and Fh can not be improved significantly. Indeed, it 
is easy to check that the octahedron O corresponding to 
probabilistic mixtures of stabilizer states can be defined 
as 



0^{p : Ft{p) < F^}, 



where 



dct 




It means that F^ is a lower bound on the threshold fi- 
delity Ft for any protocol distilling T-type magic states. 
Thus any potential improvement to Theorem|21may only 
decrease Ft from 0.910 down to F^ — 0.888. From a 
practical perspective, the difference between these two 
numbers is not important. 

On the other hand, such an improvement would be 
of great theoretical interest. Indeed, if Theorem |21 with 
Ft replaced by F^ is true, it would imply that the 
Gottesman-Knill theorem provides necessary and suffi- 
cient conditions for the classical simulation, and that a 
transition from classical to universal quantum behavior 
occurs at the boundary of the octahedron O. This kind 
of transition has been discussed in context of a general 
error model |2l|. Our model is simpler, which gives hope 
for sharper results. 

By the same argument, one can show that the quantity 



F^''^'ma^y/{HW1) = 




0.924. 
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is a lower bound on the threshold fidelity Fh for any 
protocol distiUing H-type magic states. 

A similar approach to UQC simulation was suggested 
in the work 22], where Clifford group operations were 
used to distill the entangled three-qubit state |000) + 
1001) + 1010) + 1 100), which is necessary for the realization 
of the Toffoli gate. 

The rest of the paper is organized as follows. SectionllTI 
contains some well-known facts about the Clifford group 
and stabilizer formalism, which will be used throughout 
the paper. In Sec. lIIII we prove that magic states together 
with operations from Oideai are sufficient for UQC. In 
Sec. IIVI ideal magic are substituted by faulty ones and 
the error rate that our simulation algorithm can tolerate 
is estimated. In Sec. we describe a distillation pro- 
tocol for T-type magic states. This protocol is based 
on the well-known five-qubit quantum code. In Sec. IVII 
a distillation protocol for 7J-type magic states is con- 
structed. It is based on a certain CSS stabilizer code 
that encodes one qubit into 15 and admits a nontrivial 
automorphism '2^. Specifically, the bitwise application 
of a certain non- Clifford unitary operator preserves the 
code subspace and effects the same operator on the en- 
coded qubit. We conclude with a brief summary and a 
discussion of open problems. 



II. THE CLIFFORD GROUP, STABILIZERS, 
AND SYNDROME MEASUREMENTS 

Let Cn denote the n-qubit Clifford group. Recall that it 
is a finite subgroup of t/(2") generated by the Hadamard 
gate H (applied to any qubit), the phase-shift gate K 
(applied to any qubit), and the controUcd-not gate A(cr^) 
(which may be applied to any pair qubits). 

(1) 

The Pauli operators ct^, cr^, cr^ belong to Ci, for instance, 
CT^ = ^2 and cr^ = HK^H. The PauU group P{n) C C„ 
is generated by the Pauli operators acting on n qubits. 
It is known [24j that the Clifford group C„ augmented 
by scalar unitary operators e^^ I coincides with the nor- 
malizer of P{n) in the unitary group [/(2"). Hermitian 
elements of the Pauli group are of particular importance 
for quantum error correction theory; they are referred to 
as stabilizers. These are operators of the form 

±0-"^ «)•••«) cr"" , Qfj e {0,x,y,z}, 

where cr° — I. Let us denote by S{n) the set of all n-qubit 
stabilizers: 

S{n) = {5 e P{n) : = S}. 

For any two stabilizers Si, S2 we have 5152 = ±S'2S'i and 
81=82— I. It is known that for any set of pairwise 



commuting stabilizers 81,..., 8k G S{n) there exists a 
unitary operator V G C„ such that 

V8,V^=a'[j], j = l,...,k, 

where <T^[j] denotes the operator apphed to the j-th 
qubit, e.g., (T^[l] = ct'^ (g) / (g) • • • (g) /. 

These properties of the Clifford group allow us to in- 
troduce a very useful computational procedure which 
can be realized by operations from Oideai- Specifically, 
we can perform a joint non-destructive eigenvalue mea- 
surement for any set of pairwise commuting stabilizers 
81, . . . , 8k G 8{n). The outcome of such a measurement 
is a sequence of eigenvalues A = (Ai, . . . , A^), Aj = ±1, 
which is usually called a syndrome. For any given out- 
come, the quantum state is acted upon by the projector 

k 

Now, let us consider a computation that begins with 
an arbitrary state and consists of operations from Oideai ■ 
It is clear that we can defer all Clifford operations un- 
til the very end if we replace the Pauli measurements by 
general syndrome measurements. Thus the most general 
transformation that can be realized by Oideai is an adap- 
tive syndrome measurement, meaning that the choice of 
the stabilizer 8j to be measured next depends on the 
previously measured values of Ai, . . . , Xj-i. In general, 
this dependence may involve coin tossing. Without loss 
of generality one can assume that 8j commutes with all 
previously measured stabilizers 81, . . . , 8j-i (for all pos- 
sible values of Ai, . . . , Aj_i and coin tossing outcomes). 
Adaptive syndrome measurement has been used in the 
work [25 to distill entangled states of a bipartite system 
by local operations. 

III. UNIVERSAL QUANTUM COMPUTATION 
WITH MAGIC STATES 

In this section, we show that operations from Oideai are 
sufficient for universal quantum computation if a supply 
of ideal magic states is also available. First, consider a 
one-qubit state 

|A,)^ 2-1/2(10) +e'^«|l)) (2) 

and suppose that 9 is not a multiple of 7r/2. We now 
describe a procedure that implements the phase shift gate 

A(e«,^(;;) 

by consuming several copies of \Ag) and using only oper- 
ations from Oideai ■ 

Let = a|0) + 5|1) be the unknown initial state 
which should be acted on by A(e**). Prepare the state 
1*0) — |V')'X'|v4e) and measure the stabifizer 81 = a^(^a^. 
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Note that both outcomes of this measurement appear 
with probabihty 1/2. If the outcome is '+!', we are left 
with the state 

|*+) = (a|0,0) + &e'^^|l,l». 

In the case of ' — 1' outcome, the resulting state is 

|vl/r) = (ae*''|0,l)+fe|l,0)). 

Let us XOR the first qubit into the second qubit (i.e., 
apply the operator A(cr^)). The above two states are 
mapped to 

|*+) =X0R[l,2]|vI/+> = (a|0)+6e^^|l))® |0), 
|vI/2-) =X0R[l,2]|vI/-) = {ae'0\0)+b\l))(g>\l). 

Now the second qubit can be discarded, and we are left 
with the state a|0) + 6e**^|l), depending upon the mea- 
sured eigenvalue. Thus the net effect of this circuit is 
the application of a unitary operator that is chosen ran- 
domly between A(e*^) or A(e~**) (and we know which of 
the two possibilities has occurred). 

Applying the circuit repeatedly, we effect the transfor- 
mations A(e*P^^), A(e*''^^), . . . for some integers pi , p2 , ■ • • 
which obey the random walk statistics. It is well known 
that such a random walk visits each integer with the 
probability one. It means that sooner or later we will 
get pk = I and thus reahze the desired operator A(e*^). 
The probability that we will need more than N steps to 
succeed can be estimated as cN~^/'^ for some constant 
c > 0. Note also that if 6* is a rational multiple of 27r, 
we actually have a random walk on a cyclic group . In 
this case, the probability that we will need more than N 
steps decreases exponentially with N . 

The magic state \H) can be explicitly written in the 
standard basis as 

|i?)=cos(^)|0)+sin(^)|l). (3) 

Note that HK\H) = e^''/^\A^^/i). So if we are able 
to prepare the state we can realize the operator 

A(e~"/^). It does not belong to the Clifford group. 
Moreover, the subgroup of im) generated by A(e~"/'^) 
and Ci is dense in U{2), see |33|- Thus the operators from 
Ci and C2 together with A(e~*'^/'') constitute a universal 
basis for quantum computation. 

The magic state \T) can be explicitly written in the 
standard basis: 

IT) = cos /3|0) +e'^ sin/3 |1), cos(2/3) = ^. (4) 

v3 

Let us prepare an initial state j'l'o) = \T) ® \T) and mea- 
sure the stabilizer Si = a^' ® a'^ . The outcome '-f-l' 
appears with probability = cos^ /3 -I- sin^ = 2/3. If 
the outcome is '— 1', we discard the reduced state and try 
again, using a fresh pair of magic states. (On average, 
we need three copies of the \T) state to get the outcome 



The reduced state corresponding to the outcome 

'+1' is 

1*1) =cos7|0,0)-Hisin7|l,l), 7 = ^■ 

Let us XOR the first qubit into the second and discard 
the second qubit. We arrive at the state 

|^'2) = COS7 |0) + isin7 |1). 

Next apply the Hadamard gate H: 

1*3) = i/|*2) = 2-i/V^(|0) + e-2^^|l)) - |A_./6). 

We can use this state as described above to realize the 
operator A(e~"/^). It is easy to check that Clifford op- 
erators together with A(e~"/^) constitute a universal set 
of unitary gates. 

Thus we have proved that the sets of operations 
O ideal U and O ideal U {jT)} are sufficient for uni- 

versal quantum computation. 

IV. ERROR ANALYSIS 

To establish a connection between the simulation al- 
gorithms described in Sec. IIIII and the universality the- 
orems stated in the introduction we have to substitute 
ideal magic states by faulty ones. Before doing that 
let us discuss the ideal case in more details. Suppose 
that a quantum circuit to be simulated uses a gate ba- 
sis in which the only non-Clifford gate is the phase shift 
A(e^''^/*) or A(e~''^/^). One can apply the algorithm of 
Sec. lIIII to simulate each non-Clifford gate independently. 
To avoid fluctuations in the number of magic states con- 
sumed at each round, let us set a limit of K magic states 
per round, where K is a, parameter to be chosen later. 
As was pointed out in Sec. IIIII the probability for some 
particular simulation round to "run out of budget" scales 
as exp {—aK) for some constant a > 0. If at least one 
simulation round runs out of budget, we declare a fail- 
ure and the whole simulation must be aborted. Denote 
the total number of non-Clifford gates in the circuit by 
L. The probability Pa for the whole simulation to be 
aborted can be estimated as 

Pa ^ 1 - (1 - exp i-aK))^ ^ L exp {-aK) < 1, 

provided that Lexp(— aif) <C 1. We will assume 

K > a^^logL, 

so the abort probability can be neglected. 

Each time the algorithm requests an ideal magic state, 
it actually receives a slightly non-ideal one. Such nearly 
perfect magic states must be prepared using the distil- 
lation methods described in Sec. IVIVII Let us estimate 
an affordable error rate Cout for distilled magic states. 
Since there are L non-Clifford gates in the circuit, one 
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can tolerate an error rate of the order 1 jL in implemen- 
tation of these gates |3^. Each non-Clifford gate requires 
K ~ logi magic states. Thus the whole simulation is re- 
liable enough if one chooses 



^l/{L\ogL). 



(5) 



What are the resources needed to distill one copy of 
a magic state with the error rate eo«t? To be more spe- 
cific, let us talk about iJ-type states. It will be shown in 
Sec. I VII that the number n of raw (undistilled) ancillas 
needed to distill one copy of the \H) magic state with an 
error rate not exceeding eout scales as 

nr^ {log {I /eout))\ 7 = log3 15 « 2.5, 

see Eq. Taking eout from Eq. (|3Jl, one gets 

n~ (logL^. 

Since the whole simulation requires KL ~ L log L copies 
of the distilled \H) state, we need 

N ^ L{\ogL)'f+^ 

raw ancillas overall. 

Summarizing, the simulation theorems stated in the 
introduction follow from the following results (the last 
one will be proved later): 

• The circuits described in Sec. IIIII allow one to simu- 
late UQC with the sets of operations Oideai ^{\H)} 
and CdeaiXi {\T)}; 

• These circuits work reliably enough if the states 
\H) and \T) are slightly noisy, provided that the 
error rate does not exceed tout ^ ^/{L\ogL); 

• A magic state having an error rate eout can be pre- 
pared from copies of the raw ancillary state p using 
the distillation schemes provided that Ft{p) > Ft 
or Fh{p) > Fh- The distillation requires resources 
that are polynomial in logL. 



V. DISTILLATION OF T-TYPE MAGIC 
STATES 

Suppose we are given n copies of a state p, and our 
goal is to distill one copy of the magic state \T). The 
polarization vector of p can be brought into the positive 
octant of the Bloch space by a Clifford group operator, 
so we can assume that 

Px,Pv,Pz > 0. 

In this case, the fidelity between p and \T) is the largest 
one among all T-type magic states i.e.. 



A related quantity, 
e = 1 - {T\p\T) 



V3 



{Px+Py+Pz) 



will be called the initial error probability. By definition, 
0<e<l/2. 

The output of the distillation algorithm will be some 
one-qubit mixed state pout- To quantify the proximity 
between pout and \T), let us define a final error probabil- 
ity: 

£out = 1 - {T\pout\T)- 

It will be certain function of n and e. The asymptotic 
behavior of this function for n ^ oo reveals the existence 
of a threshold error probability, 




0.173, 



such that for e < eg the function eout (^j e) converges to 
zero. We will see that for small e, 



eout{n,e) (5e)' 



e = l/log2 30 «0.2. (6) 



On the other hand, if e > eo, the output state converges 
to the maximally mixed state i.e., lim„^oo eo«t('^, e) — 
1/2. 

Before coming to a detailed description of the distil- 
lation algorithm, let us outline the basic ideas involved 
in its construction. The algorithm recursively iterates 
an elementary distillation subroutine that transforms five 
copies of an imperfect magic state into one copy having a 
smaller error probability. This elementary subroutine in- 
volves a syndrome measurement for certain commuting 
stabilizers ^i, 5*2, S'3, 5*4 € S{5). If the measured syn- 
drome (Ai, A2, A3, A4) is nontrivial (Xj = —1 for some j), 
the distillation attempt fails and the reduced state is dis- 
carded. If the measured syndrome is trivial {Xj = 1 for 
all j), the distillation attempt is successful. Applying a 
decoding transformation (a certain Clifford operator) to 
the reduced state, we transform it to a single-qubit state. 
This qubit is the output of the subroutine. 

Our construction is similar to concatenated codes used 
in many fault-tolerant quantum computation techniques, 
but it differs from them in two respects. First, we do not 
need to correct errors — it suffices only to detect them. 
Once an error has been detected, we simply discard the 
reduced state, since it does not contain any valuable in- 
formation. This allows us to achieve higher threshold 
error probability. Second, we do not use quantum codes 
in the way for which they were originally designed: in our 
scheme, the syndrome is measured on a product state. 

The state |r) is an eigenstate for the unitary operator 
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1 1 

i —i 



eCi. 



(7) 



7 



Note that T acts on the Pauh operators as follows |34 |: 
Ta^'T^ ^ c^^ Tcr^rt = (jy, Ta^T^ = cr"=. (8) 
We will denote its eigenstates by |To) and |Ti), so that 



1^0,1X^0, 



V3' 



Note that |To) =^ |r) and |Ti) = (7^ H\To) are T-type 
magic states. 

Let us apply a dephasing transformation, 



(9) 



to each copy of the state p. The transformation D can 
be realized by applying one of the operators /, T, T^^ 
chosen with probability 1 /3 each. Since 



we have 



D{\n){T^\)^D{\T,){n\)^Q, 



D{p) = (l-e)\n){n\+e\T{){T,\. 



(10) 



We will assume that the dephasing transformation is ap- 
plied at the very first step of the distillation, so p has 
the form pU|) . Thus the initial state for the elementary 
distillation subroutine is 



Pi: 



P 



E 



Ml 



(11) 



where x = {xi, 
ber of I's in x, and 



. , x^) is a binary string, |a;| is the num- 



IT.) =' IT, 



IT, 



The stabilizers 5*1 , . . . , 6*4 to be measured on the state 
Pin correspond to the famous 5-qubit code, see (2fii. i27']. 
They are defined as follows: 

5*1 = cr'' (g) o-^ (8) cr^ (g) cr^ (Ki /, 

52 = I ® a"^ ® a"" ® a"" ® a"^ , 

53 = a"" (g) I (g) a"" (g) (g) a\ 

54 = a'^ g) a'' g) I g) a"" g) a'^ . (12) 

This code has a cyclic symmetry, which becomes explicit 
if we introduce an auxiliary stabilizer, 6*5 = S1S2S3S4 = 
a'^ g) (T^ g) (T^ g) I g) . Let £ be the two-dimensional 
code subspace specified by the conditions S'jl^) = I^P), 
j — 1, . . . , 4, and U be the orthogonal projector onto £: 



(13) 



It was pointed out in the work that the operators 



\(S5 



and 



T = (T) 



(85 



(14) 



commute with H, thus preserving the code subspace. 
Moreover, X, Y, Z obey the same algebraic relations as 
one-qubit Pauli operators, e.g., XY = iZ. Let us choose 
a basis in £ such that X, Y, and Z become logical Pauli 
operators a^, tr^, and cr^, respectively. How does the op- 
erator T act in this basis? From Eq. JSJ we immediately 
get 



fxf\ 



fzf^ = y, TYT^ = X. 



Therefore T coincides with the logical operator T up to 
an overall phase factor. This factor is fixed by the con- 
dition that the logical T has eigenvalues e^'^ . 

Let us find the eigenvectors of T that belong to £. 
Consider two particular states from £, namely 

|Ti^) = y6n|Tooooo), and ItJ^) = \/6n|Tniii). 
In Appendix A we show that 

(Tooooo|n|Tooooo) = (Tiiiii|n|Tiiiii) = -, 



(15) 



so that the states \Tq) and \T-^) are normalized. Taking 
into account that [T, 11] = and that 



T|T, 
we get 



— g'f (5-2|- 



\T^) for all x e {0, 1}^ 



(16) 



00000/ 



f |Ti^> = %/6fn|Tooooo 
Analogously, one can check that 

f |T(f ) = e+'^'/^lT^). 



It follows that T is exactly the logical operator T, includ- 
ing the overall phase, and \Tq) and \Ti) are the logical 
states |To) and |Ti) (up to some phase factors, which are 
not important for us). Therefore we have 



KiXro'il-ni 



Y + Z) 



(17) 



Now we are in a position to describe the syndrome mea- 
surement performed on the state pin. The unnormalized 
reduced state corresponding to the trivial syndrome is as 
follows: 



E 

i:e{o,i}J* 



,1-1(1 _,)5-i.in|T,)(r,|n, (is) 



see Eq. (|ll|l . The probability for the trivial syndrome to 
be observed is 



Trps. 
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Note that the state n|Tj;) is an eigenvector of T for any 
X € {0, 1}^. But we know that the restriction of T on 
£ has eigenvalues e^"^/^. At the same time, Eq. p6|l 
imphes that 



whenever |a;| = lor|a:;|=4. This eigenvalue equation is 
not a contradiction only if 



for 



1,4. 



This equality can be interpreted as an error correction 
property. Indeed, the initial state pm is a mixture of 
the desired state |Tooooo) and unwanted states \Tx) with 
> 0. We can interpret the number of '1' components 
in a; as a number of errors. Once the trivial syndrome has 
been measured, we can be sure that either no errors or 
at least two errors have occurred. Such error correction, 
however, is not directly related to the minimal distance 
of the code. 

It follows from Eq. Hlt)|) that for — 2,3 one has 
fnlr^,) = e^^'^/^nlT^), so that n|T^) must be propor- 
tional to one of the states \Tq), IT/^). Our observations 
can be summarized as follows: 

g-l/2|yL 



n|r,) 



6-1/2 |r„i; 



if 


\x\ 




if 


\x\ 


= 1, 


if 


\x\ 


= 2, 


if 


\x\ 


= 3, 


if 


\x\ 


= 4, 


if 


\x\ 


= 5. 



(19) 



Here the coefficients Qx, bx depend upon x in some way. 
The output state ((TH|l can now be written as 



Ps = 



E I 

x: la; I —2 



(20) 



hl-e)'+e^l-er ^ |5.| 



x:\x\ —3 



|r^)(r^| 



To exclude the unknown coefhcients and bx^ we can 
use the identity 

\T,^){T,^\ + \Tl'){T,^\^n= J2 n|T,)(T.|n. 

a:e{0,l}5 

Substituting Eq. H19() into this identity, we get 

5 
6' 



a::|a:|— 3 



a:: la; I —2 



So the final expression for the output state ps is as fol- 
lows: 

"e^-H5e2(l-e)31 



Ps 
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(l-e)5 + 5e3(l-e)2 



|Ti^)(T^|. (21) 



Accordingly, the probability to observe the trivial syn- 
drome is 

£5 + 5£^(l-£)3 + 5e3(l-£)^ + (l-£)5 

Ps = 7 ■ 22) 

6 

A decoding transformation for the 5-qubit code is a 
unitary operator V ^ such that 

VC = C^® |0, 0,0,0). 

In other words, V maps the stabilizers Sj, j — 2,3,4,5 
to <7^[j]- The logical operators X, Y, Z are mapped to 
the Pauli operators cr^, a-^ , acting on the first qubit. 
From Eq. H17|) we infer that 

V\To\) = |ro,i)® 10,0,0,0) 

(maybe up to some phase). The decoding should be fol- 
lowed by an additional operator A = H ^ Ci, which 
swaps the states \To) and |Ti) (note that for small e the 
state Ps is close to \T^), while our goal is to distill |To)). 
After that we get a normalized output state 



Pout = (1 - <^out)\To){To\ -I- £out I J^i) (Til, 



where 



^out 



(23) 



The plot of the function £o«t(£) is shown on Fig. 2. It 
indicates that the equation eout (e) = e has only one non- 
trivial solution, £ = £o ~ 0.173. The exact value is 




If £ < £o, we can recursively iterate the elementary dis- 
tillation subroutine to produce as good an approxima- 
tion to the state \To) as we wish. On the other hand, 
if £ > €o, the distillation subroutine increases the er- 
ror probability and iterations converge to the maximally 
mixed state. Thus £o is a threshold error probability for 
our scheme. The corresponding threshold polarization is 
1 — 2£o = ~ 0.655. For a sufficiently small e, one 

can use the approximation £o«t(e) ~ 5£^. 

The probability ps = ps (e) to measure the trivial syn- 
drome decreases monotonically from 1/6 for £ = to 1/16 
for £ = 1/2, see Fig. 2. In the asymptotic regime where e 
is small, we can use the approximation's Ps(0) = 1/6. 

Now the construction of the whole distillation scheme 
is straightforward. We start from n 3> 1 copies of the 
state p = (1 - £)|ro)(ro| + £|ri)(Ti|. Let us split these 
states into groups containing five states each and apply 
the elementary distillation subroutine described above to 
each group independently. In some of these groups the 
distillation attempt fails, and the outputs of such groups 
must be discarded. The average number of "successful" 
groups is obviously Ps{e){n/5) ~ n/30 if e is small. Ne- 
glecting the fluctuations of this quantity, we can say that 
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0.05 - 



"o 0.1 0.2 £ 0.3 0.4 0.5 

FIG. 2: The final error probability eout and the probability 
Ps to measure the trivial syndrome as functions of the initial 
error probability e for the T-type states distillation. 

our scheme provides a constant yield r — 1/30 of out- 
put states that are characterized by the error probability 
£oMt(f) ~ 5e^. Therefore we can obtain r^n states with 
^out ~ r^n states with eout ~ 5''e®, and so on. We 

have created a hierarchy of states with n states on the 
first level and four or fewer states on the last level. Let k 
be the number of levels in this hierarchy and Cout the er- 
ror probability characterizing the states on the last level. 
Up to small fluctuations, the numbers n, k, eout and e 
are related by the following obvious equations: 

eout~\{^ef\ r'^n^l. (24) 
5 

Their solution yields Eq. 

VI. DISTILLATION OF ff-TYPE MAGIC 
STATES 

A distillation scheme for i/-type magic states also 
works by recursive iteration of a certain elementary distil- 
lation subroutine based on a syndrome measurement for 
a suitable stabilizer code. Let us start with introducing 
some relevant coding theory constructions, which reveal 
an unusual symmetry of this code and explain why it is 
particularly useful for H-iype magic states distillation. 

Let F2' be the n-dimensional binary linear space and 
A be a one-qubit operator such that A? = /. With any 



binary vector u = (wi,...,Un) G we associate the 
71-qubit operator 

A{u) = ® (g) • •• ® 

Let {u,v) = Yll^i'^i'^i mod 2 denote the standard bi- 
nary inner product. If £ C is a linear subspace, we 
denote by the set of vectors which are orthogonal to 
C. The Hamming weight of a binary vector u is denoted 
by \u\. Finally, m • u e F2 designates the bitwise product 
of u and v i.e., {u ■ v)i = UiVi. 

A systematic way of constructing stabilizer codes was 
suggested by Calderbank, Shor, and Steane, see |2S. ii29| . 
Codes that can be described in this way will be referred 
to as standard CSS codes. In addition, we consider their 
images under an arbitrary unitary transformation V e 
U{2) applied to every qubit. Such "rotated" codes will 
be called CSS codes. 

Definition 2. Consider a pair of one-qubit Hermitian 
operators A, B such that 

= B^ = /, AB = -BA, 

and a pair of binary vector spaces Ca,^b Q Fj, such 
that 

{u,v) = for all u G Ca, v <E Cb. 
A quantum code CSS(A, £a; B,Cb) is a decomposition 

(c^)^"= n{^^,7^), (25) 

where the subspace 7i(/i, 77) is defined by the conditions 

A{u)\^) = (-1)'^(")|*), B{v)\^) = (-1)"(^'|^') 

for all u £ Ca and v £ Cb. The linear functionals fi 
and rj are refereed to as A- syndrome and B-syndrome, 
respectively. The subspace Ti.{0, 0) corresponding to the 
trivial syndromes fi ^ ^ is called the code subspace. 

The subspaces 7i(/i, 77) are well defined since the op- 
erators A(u) and B{v) commute for any u G Ca and 
V e Cb- 

A{u)B{v) = (-1)("^'')B(w)A(u) = B{v)A{u). 
The number of logical qubits in a CSS code is 

k log2 (dim7i(0, 0)) = n — dim£^ — dhnCB- 

Logical operators preserving the subspaces Tl{fJ.,ri) can 
be chosen as 

{A{u) : ue C^/ Ca} and {B{v) : v e C^/ Cb} ■ 

(By definition, Ca C Cg and Cb C so the factor 
spaces are well defined.) In the case where A and B are 
Pauli operators, we get a standard CSS code. Generally, 
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A = Vcr^V^ and B = Va^V^ for some unitary operator 
V £ SU{2), so an arbitrary CSS code can be mapped to 
a standard one by a suitable bitwise rotation. By a syn- 
drome measurement for a CSS code we mean a projective 
measurement associated with the decomposition (|25|l . 

Consider a CSS code such that some of the operators 
A{u), B{v) do not belong to the Pauli group P{n). Let 
us pose this question: can one perform a syndrome mea- 
surement for this code by operations from Oideai only? 
It may seem that the answer is 'no', because by def- 
inition of Oideai one cannot measure an eigenvalue of 
an operator unless it belongs to the Pauli group. Sur- 
prisingly, this naive answer is wrong. Indeed, imagine 
that we have measured part of the operators A{u), B{v) 
(namely, those ones that belong to the Pauli group). 
Now we may restrict the remaining operators to the sub- 
space corresponding to the obtained measurement out- 
comes. It may happen that the restriction of some un- 
measured operator, A{u), which does not belong to the 
Pauli group, coincides with the restriction of some other 
operator A{u) £ P{n). If this is the case, we can safely 
measure A{u) instead of A{u). The 15-qubit code that 
we use for the distillation is actually the simplest (to our 
knowledge) CSS code exhibiting this strange behavior. 
We now come to an explicit description of this code. 

Consider a function / of four Boolean variables. De- 
note by [/] e the table of all values of / except 
/(OOOO). The table is considered as a binary vector i.e., 

[/] = (/(OOOl), /(OOlO), /(OOll), . . . , /(nil)). 

Let Ci be the set of all vectors [/], where / is a linear 
function satisfying /(O) = 0. In other words, Ci is the 
linear subspace spanned by the four vectors [xj], j = 
1,2,3,4 (where Xj is an indicator function for the jth 
input bit): 

£1 = lin.span([a;i], [X2], [^3], [a;4]). 

Let also £2 be the set of all vectors [/], where / is a 
polynomial of degree at most 2 satisfying /(O) = 0. In 
other words, £2 is the linear subspace spanned by the 
four vectors [xj] and the six vectors [xiXj]: 

£ = lin span ( I^^l' t^^l' N, M, [X1X2], [xixs], \ 
\ [a;ia;4], [a;2a;3], [a;2a;4], [a;3a;4] J' 

The definition of Ci and £2 resembles the definition of 
punctured Reed-MuUer codes of order one and two, re- 
spectively, see 30]. Note also that £1 is the dual space 
for the 15-bit Hamming code. 

The relevant properties of the subspaces £j are stated 
in the following lemma. 

Lemma 1. 

1) For any m € £1 one has \u\ = (mod 8). 

2) For any v G C2 one has \v\ = (mod 2). 

3) Let [1] be the unit vector (1, 1, ... , 1, 1). Then 
Cj- =£2® [1] and £^ = £1 e [1]. 



4) For any vectors u,v E Ci one has \u -vl =0 (mod 4). 

5) For any vectors u G £1 and v G £^ one has 
\u-v\ = (mod 4). 

Proof. 

1) Any linear function / on satisfying f(Q) — takes 
value 1 exactly eight times (if / 7^ 0) or zero times (if 
/ = 0). 

2) All basis vectors of £2 have weight equal to 8 (the 
vectors [xi]) or 4 (the vectors [xiXj]). By linearity, all 
elements of £2 have even weight. 

3) One can easily check that all basis vectors of £1 are 
orthogonal to all basis vectors of £2, therefore £1 C £^, 
£2 C £;j'-. Besides, we have already proved that [1] G £^ 
and [1] G £^. Now the statement follows from dimension 
counting, since dim£i = 4 and dim £2 = 10. 

4) Without loss of generality we may assume that m 7^ 
and V 0. If u = w, the statement has been already 
proved, see property 1. If u ^ v, then u — [f], v — [g] for 
some linearly independent linear functions / and g. We 
can introduce new coordinates (2/1,2/2,2/3,2/4) on F| such 
that 2/1 = fix) and 2/2 = 9{x). Now \u ■ v\ ^ | [2/12/2] | = 4. 

5) Let M G £1 and w G £^. Since £^ = £1 ® [1], there 
are two possibilities: w G £1 and v = [1] + w for some 
w G £1. The first case has been already considered. In 
the second case we have 

15 

\u-v\ = J2uj{l-Wj) = \u\ - \u-w\. 

It follows from properties 1 and 4 that = (mod 4). 

□ 

Now consider the one-qubit Hermitian operator 

where K is the phase shift gate, see Eq. (Q. By def- 
inition, A belongs to the Clifford group Ci. One can 
easily check that A^ — I and Aa^ = —a^A, so the code 
CSS(ct^,£2; a, £1) is well defined. We claim that its code 
subspace coincides with the code subspace of a certain 
stabilizer code. 

Lemma 2. Consider the decomposition 

associated with the code CSS(ct^,£2; ^,£1) and the de- 
composition 

(C2)«15^ 0^(^,^), 

associated with the stabilizer code CSS (cr^, £2; cr^,£i). 
For any syndrome rj £ C{ one has 
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Moreover, for any ^ G C2 there exists some w G such 
that for any rj G C\ 

n{ii,ii)=A{w)g(Q,Ti). (27) 

This Lemma provides a strategy to measure a syn- 
drome of the code CSS(cr^, £2; A, Ci) by operations from 
Oideai- Specifically, we measure /i (i.e., the tr^ part of the 
syndrome) first, compute w = w{fi), apply A{wy , mea- 
sure 77 using the stabilizers cr^([xj]), and apply A{w). 

Proof of the Lemma. Consider an auxiliary subspace, 

corresponding to the trivial cr^-syndrome for both CSS 
codes. Each state j^*) G 7i(0) can be represented as 

where Cy are some complex amplitudes and \v) — 
. . . , 1115) are vectors of the standard basis. Let us 
show that 

A(u)|*) = cr"^(u)|*) for any 1^-) e Ti:, u e Ci. 

To this end, we represent A as a^e^'^^^K^ . For any u <E Li 
and V e C2 we have 

A{u)\v) = a^(u)e'5'"l-'^l"-"l|w) = a^(u)|w), 

because \u\ = (mod 8) and \u ■ v\ = Q (mod 4) (see 
Lemma n parts 1 and 5). 

Since for any u G Ci the operators A{u) and cr^(u) act 
on 7i in the same way, their eigenspaces must coincide 
i.e., H(0, rj) = g{Q, 77) for any r; e LI- 

Let us now consider the subspace TL{^.,ri) for arbitrary 
fi G Ci,, f] G C\. By definition, /i is a linear functional 
on £2 ^ we can extend it to a linear functional on 
i.e., represent it in the form /i(u) = {w,v) for some 
w e F^^. Then for any |*) e H{n,ri), v e C2, and 
M G £1 we have 

a^(v)A(w;)t|*> = {-!)'■''" '''^ A{w)'' a^v)\^) = A(u;)t|^'), 
A(w)A(w)t|*) ^ A{w)^ A{u)\^) = (-l)"('')A(u;)t|*) 

(as cr^ and A anticommute), hence A(u')t|vlf) g Ti,{0,rj). 
Thus, 

H(ai,77) = A{w)niO,7i) = A(«;)e(0,77). 

□ 

Lemma 121 is closely related to an interesting property 
of the stabihzer code CSS (cr^, £2; cr^, £1 ), namely the ex- 
istence of a non-Clifford automorphism ^3]. Consider a 
one-qubit unitary operator W such that 

Wa'W'' = a"" and Wa'^W'^ = A. 



It is defined up to an overall phase and obviously does 
not belong to the Clifford group C\. However, the bitwise 
application of W i.e., the operator ■pV'®^^ preserves the 
code subspace tj(0,0). Indeed, VF®^^t7(0, 0) corresponds 
to the trivial syndrome of the code 

CSS(Tya^M^^£2; Wg''W\Li) = CSS(fT^£2; A,Li). 

Thus W®^^g{Q,Q) = W(0,0). But 7i(0,0) = ^^(0,0) due 
to the lemma. 

Now we are in a position to describe the distillation 
scheme and to estimate its threshold and yield. Suppose 
we are given 15 copies of the state p, and our goal is 
to distill one copy of an i/-type magic state. We will 
actually distill the state 

|Ao)''=''-^(|0)+e^^|l))=e^tffift|^). 

Note that \Aq) is an eigenstate of the operator A; specif- 
ically, A|ylo) — \Aq]. Let us also introduce the state 

\A^)=o^\A^), 

which satisfies AjAi) = — Since the Clifford group 
C\ acts transitively on the set of i?-type magic states, we 
can assume that the fidelity between p and \Aq) is the 
maximum one among all -ff-type magic states, so that 

Fu{p) = V{Ao\p\Ao). 
As in Sec. we define the initial error probability 

e''^'l-[FH{p)?^{A,\p\A,). 
Applying the dephasing transformation 

D{rj) = ^{rj + A7^A^) 

to each copy of p, we can guarantee that p is diagonal in 
the {ylo,^i} basis i.e., 

p = D{p)^il-e)\Ao){Ao\+e\A,){A,\. 

Since A G Ci, the dephasing transformation can be real- 
ized by operations from Oideai- Thus out initial state is 

Prn = P^'' = E ^'"'(1 - ^)''"'"' l^">(^"l' (28) 

where \Au) '^^^ • • • «) \Au,,). 

According to the remark following the formulation of 
Lemma|21 we can measure the syndrome {p, rj) of the code 
CSS(tT^,£2; A, Ci) by operations from Oideai only. Let 
us follow this scheme, omitting the very last step. So, we 
begin with the state measure p, compute w = w{p), 
apply A{wy , and measure ip We consider the distillation 
attempt successful if 77 = 0. The measured value of p is 
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not important at this stage. In fact, for any fi E C2 the 
unnormalized post-measurement state is 



In this equation 11 is the projector onto the code subspace 
H(0, 0) = g{0, 0) i.e., n = U.Ha for 



(29) 



v£C2 ueCi 

Let us compute the state ps = IlpinTl. Since 

A{u)\A^) = (-1)("''")|A^), a'{v)\A^) = 

one can easily see that IlyilA^) — \Aw) if w £ Ci, oth- 
erwise n^|A^,) — 0. On the other hand, n^lAu,) does 
not vanish and depends only on the coset of C2 that con- 
tains w. There are only two such cosets in Ci (because 
Ci = £2 ffi [1], see Lemma nj, and the corresponding 
projected states are: 



1^0^) "=^' v/|A|n,|Ao...o) 

<Lx dct 



1 



E 1^")' (30) 



\C2\nJAi...i) 



E 



The states |Ag j^) form an orthonormal basis of the code 
subspace. The projections of \A^) for w € Cj^ onto the 
code subspace are given by these formulas: 



U\A^ 

n\A„ 



\C2 



\A' 



if w e £2, 



|A[> if weC2 + [l]. 



Now the unnormalized final state ps = Ilpinll can be 
expanded as 



veC2 



1 ^ ei5-H(i_,)M|Af')(Af 



veC2 



The distillation succeeds with probability 

(The factor \C2\ reflects the number of possible values of 
p, which all give rise to the same state p^.) 

To complete the distillation procedure, we need to ap- 
ply a decoding transformation that would map the two- 
dimensional subspace H(0, 0) C (C^)**^^ onto the Hilbert 
space of one qubit. Recall that H(0,0) = ^(0,0) is the 
code subspace of the stabilizer code CSS (cr^, £2; cr"^, £1). 
Its logical Pauli operators can be chosen as 



X = {a^Y 



«il5 



It is easy to see that X, Y, Z obey the correct algebraic 
relations and preserve the code subspace. The decod- 
ing can be realized as a Clifford operator V E C15 that 
maps X, Y, Z to the Pauli operators tr^, , a'' acting 
on the first qubit. (The remaining fourteen qubits be- 
come unentangled with the first one, so we can safely 
disregard them.) Let us show that the logical state 
I^q) is transformed into |Ao) (up to some phase). For 
this, it suflices to check that {^A^\X\A^) ^ (^ok^l^o), 
{A\i\Y\Al) = (Ao|a^|Ao), and = {A^\a^A^). 

Verifying these identities becomes a straightforward task 
if we represent ) in the standard basis: 



|^^|l/22-15/2 ^ 



= 2-5/2 ^(|.) + e-f|«+[l])). 

To summarize, the distillation subroutine consists of 
the following steps. 

1 . Measure eigenvalues of the Pauli operators ( \xj ] ) , 
a^(\xjXk\) (for 2,k = 1,2,3,4). The outcomes de- 
termine the cr^-syndrome, p £ Ci,- 



2. Find w = w{p) E such that (w, v) 
any v E £2. 

3. Apply the correcting operator A{wy . 



p{v) for 



4. Measure eigenvalues of the operators a^([a::j]). The 
outcomes determine the A-syndrome, rj E C^. 

5. Declare failure if 77 ^ 0, otherwise proceed to the 
next step. 

6. Apply the decoding transformation, which takes 
the code subspace to the Hilbert space of one qubit. 



The subroutine succeeds with probability 



E 



(l-e)H. 



(31) 



In the case of success, it produces the normalized output 
state 



Pout = (l-e<,„t)l^o)(^|+eo«t|^i)(^i| 
characterized by the error probability 



^out 



1 ^15- |t' 



Ps > e 



(1 



(32) 



(33) 



The sums in Eqs. (|31|l and (|33|l are special forms of so- 
called weight enumerators. The weight enumerator of a 
subspace £ C F2 is a homogeneous polynomial of degree 
n in two variables, namely 

W£(a;,y) = ^x"-HyM. 
uec 
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^out 




FIG. 3: The final error probability eo„t(e) for the H-type 
states distillation. 



with probability close to 1, therefore the yield is close to 
1/15. The output error probability is 

Eout - 35e3. (38) 

Now suppose that the subroutine is applied recursively. 
From n copies of the state p with a given e, we distill one 
copy of the magic state |^o) with the final error proba- 
bility 




where k is the number of recursion levels (here we neglect 
the fluctuations in the number of successful distillation 
attempts) . Solving these equation, we obtain the relation 



In this notation, 

Ps = Wc±ie,l- e), to 



WcA^,l-e) 



The MacWilliams identity |33| relates the weight enu- 
merator of C to that of : 

Applying this identity and taking into account that C2 = 
Ci © [1] and that \u\ = (mod 2) for any w g £1 (see 
Lemma we get: 

Ps^-^WcAlA-2e), W= 2 (,^~ 1^^,(1,1-2.) 

(34) 

The weight enumerator of the subspace Ci is particularly 
simple: 

Substituting this expression into Eq. (|34() . we arrive at 
the following formulas: 



Ps = 



1 + 15(1 - 2ef 



16 



(35) 



_ 1 - 15(1 - 2ey + 15(1 - 2£)« - (1 - 2e)i5 

2(1 + 15(1-26)8) ■ ^ ' 

The function eont(e) is plotted on Fig. 3. Solving the 
equation eout(e) = e numerically, we find the threshold 
error probability: 



eo ~ 0.141. 



(37) 



Let us examine the asymptotic properties of this 
scheme. For small e the distillation subroutine succeeds 



eout{n,e)^ (^VsEeY , ^ = V logg 15 « 0.4. (39) 
It characterizes the efficiency of the distillation scheme. 



VII. CONCLUSION AND SOME OPEN 
PROBLEMS 

We have studied a simplified model of fault-tolerant 
quantum computation in which operations from the Clif- 
ford group are realized exactly, whereas decoherence oc- 
curs only during the preparation of nontrivial ancillary 
states. The model is fully characterized by a one-qubit 
density matrix p describing these states. It is shown that 
a good strategy for simulating universal quantum com- 
putation in this model is "magic states distillation" . By 
constructing two particular distillation schemes we find 
a threshold polarization of p above which the simulation 
is possible. 

The most exciting open problem is to understand the 
computational power of the model in the region of param- 
eters 1 < l/Oxl + l/Oy I + IPzI < 3/\/7 (which corresponds to 
< Ft{p) < Ft, see section Pl. In this region, the dis- 
tillation scheme based on the 5-quit code does not work, 
while the Gottesman-Knill theorem does not yet allow 
the classical simulation. One possibility is that a transi- 
tion from classical to universal quantum behavior occurs 
on the octahedron boundary, \px\ + \py \ + \pz\ = 1. 

To prove the existence of such a transition, one it suf- 
fices to construct a T-type states distillation scheme hav- 
ing the threshold fidelity F^. A systematic way of con- 
structing such schemes is to replace the 5-qubit by a 
Gi^(4)-linear stabilizer code. A nice property of these 
codes is that the bitwise application of the operator T 
preserves the code subspace and acts on the encoded 
qubit as T, see jsj] for more details. One can check that 
the error-correcting effect described in Sec. Ivl takes place 
for an arbitrary Gi^ (4)-linear stabilizer code, provided 
that the number of qubits is n = 6fc — 1 for any integer 
k. Unfortunately, numerical simulations we performed 
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for some codes with n = 11 and n = 17 indicate that the 
threshold fidehty increases as the number of qubits in- 
creases. So it may well be the case that the 5-qubit code 
is the best Gi^ (4)-linear code as far as the distillation is 
concerned. 

From the experimental point of view, an exciting open 
problem is to design a physical system in which reliable 
storage of quantum information and its processing by 
Clifford group operations is possible. Since our simula- 
tion scheme tolerates strong decoherence on the ancilla 
preparation stage, such a system would be a good candi- 
date for a practical quantum computer. 
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APPENDIX A 

The purpose of this section is to prove Eq. (|15|l . Let 
us introduce this notation: 

\To) = ITqoooo) and |fi) = iTnin). 

Consider the set 5*+ (5) C S{5) consisting of all possible 
tensor products of the PauH operators a^, , on five 
qubits (clearly, |5'+(5)| = 4^ = 15(5)1/2 since elements of 
5(5) may have a plus or minus sign). For each g S 5"+ (5) 
let l^l e [0, 5] be the number of qubits on which g acts 



nontrivially (e.g. jcr^ (g) (8) cr^ (g) / (Xi /| =3). Wc have 

g€S+(5) 

Now let us expand the formula H13|) for the projector H. 
Denote by G C ^"(5) the Abelian group generated by the 
stabilizers Si, S2, S3, S4. It consists of sixteen elements. 
Repeatedly conjugating the stabilizer Si by the operator 
f = T**^, we get three elements of G: 

Si = a'-^ ® a'' ® a"- ® a'-' ® I, 
SiS^Si ^ a'' ® ® ® a'' ® I , 

S3S4 = fJ^ (8) 0-^ (g) (T^ (g) (7^ (g) /. 

Due to the cyclic symmetry mentioned in section Ivl the 
15 cyclic permutations of these elements also belong to 
G; together with the identity operator they exhaust the 
group G. Thus G C 5+ (5), and we have 




Taking into account that Tr{gh) — 2^Sgji for any g,h G 
S+{5), we get 

(folnlfo) = E 3-H/2Tr(g/.) 

heG geS+{5) 

16 6' 
Similar calculations show that (TilIIlTi) = i. 
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